Agentless Scan

Agentless Scan


Role Required: Administrator
 
The workstations and servers that are not part of any domain/network can be scanned using Stand Alone Audit. This method involves a script being installed on the remote workstations which scans and pushes the inventory details to the AssetExplorer server.
 
 Make sure to disable the Stop uploading scanned XMLs via non-login URL option under Admin > Discovery > Scan Settings > General for agentless scan to work.  

 Accessing Standalone Audit Configuration 

  1. To access the standalone audit configuration, download the scripts from the links below.
    1. Click here to download the script for Windows.
    2. Click here to download the script for Linux.
    3. Click here to download the script for Mac.
    4. Click here to download the script for HP-UX.
  2. Save the file as ae_scan.vbs for Windows machines. In the case of Linux, MAC, and HP-UX machines, save the file as ae_scan_linux.sh, ae_scan_mac.sh, and ae_scan_hpux.sh respectively.
  3. Open the command prompt. Change the directory to the folder where the script is saved and execute the command:
    1. For Windows: CSCRIPT ae_scan.vbs
    2. For Linux: sh ae_scan_linux.sh
    3. For MAC: sh ae_scan_mac.sh
    4. For HP-UX: sh ae_scan_hpux.sh
It is recommended to execute the script as a root/sudo user to avoid any latency. Example: sudo sh ae_scan_hpux.sh 
  1. Executing the script will push the data to the AssetExplorer server. If the server is not reachable from the remote machine, an XML file is generated in the same folder.
  2. Locate and import the XML file from the application.
  3. On importing the XML file, the standalone workstation is scanned and gets listed on the Workstation list view page.
 
For Windows Machines: 
The ae_scan.vbs file can be configured as a login script in the active directory with script parameter -SilentMode. This will scan the target workstations upon user login and push the scanned inventory data to the AssetExplorer Server. 

For Linux Machines: 
The ae_scan_linux.sh file can be configured in crontab or as a start-up script so that the machines are scanned periodically and the data are pushed to the server. The data is pushed to the AssetExplorer server using curl which has to be installed on the Linux machine. 

For MAC Machines: 
The ae_scan_mac.sh file can be configured in crontab or as a start-up script so that the machines are scanned periodically and the data are pushed to the server. The data is pushed to the AssetExplorer server using curl which has to be installed on the MAC machine. 

For HP-UX Machines: 
The ae_scan_hpux.sh can be configured in crontab so that the machines are scanned periodically and the data is pushed to the server. curl is used for pushing the data to the server and has to be installed if it is not available in the HP-UX machines. 

    • Related Articles

    • Scan Methods

      Role Required: SDAdmin Managing security requires an organization to identify, catalog, and monitor all its IT assets to discover vulnerabilities across devices. This can be achieved through asset scanning. The various types of scanning methods that ...

    • Configure Schedule Scan

      Role Required: SDAdmiin AssetExplorer allows you to configure different scanning schedules to scan assets periodically. You can configure the settings to schedule a scan under Admin > Discovery > Schedule Scan. Schedule agent-based UEM scan: Enable ...

    • FAQs Related to Scan

      How to perform a domain scan in AssetExplorer? When you install and launch AssetExplorer for the first time, it automatically detects all domains within your network and neighboring networks of the server where it's installed. To view a list of all ...

    • Agent-Based Scan

      How does an agent-based scan work? Refer to the following link: UEM Agent What are the OS supported in the agent-based scan? The following Windows OS versions are supported: Windows 10 Windows 8.1 Windows 8 Windows 7 Windows Vista Windows XP* ...

    • Scan Assets

      Role Required: SDAdmin, SDSiteAdmin, Technicians with Scan Now permissions. Scan Individual Assets In the Assets tab, select your preferred asset classification - IT Assets or Virtual Hosts and VMs. Select the relevant asset product type. On the ...